use lts node

* chore(deps): bump jsonata from 2.0.3 to 2.0.4

Bumps [jsonata](https://github.com/jsonata-js/jsonata) from 2.0.3 to 2.0.4.
- [Release notes](https://github.com/jsonata-js/jsonata/releases)
- [Changelog](https://github.com/jsonata-js/jsonata/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jsonata-js/jsonata/compare/v2.0.3...v2.0.4)

---
updated-dependencies:
- dependency-name: jsonata
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* changelog

* changelog++

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: JM Faircloth <jmfaircloth@hashicorp.com>

.github/workflows/build.yml

@@ -10,7 +10,7 @@ jobs:
 
     - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
       with:
-        node-version: '20.9.0'
+        node-version: '20.12.2'
 
     - name: Setup NPM Cache
       uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
@@ -40,7 +40,7 @@ jobs:
 
     - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
       with:
-        node-version: '20.9.0'
+        node-version: '20.12.2'
 
     - name: Setup NPM Cache
       uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
@@ -76,7 +76,7 @@ jobs:
 
     - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
       with:
-        node-version: '20.9.0'
+        node-version: '20.12.2'
 
     - name: Setup NPM Cache
       uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
@@ -110,7 +110,7 @@ jobs:
 
     - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
       with:
-        node-version: '20.9.0'
+        node-version: '20.12.2'
 
     - name: Setup NPM Cache
       uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
@@ -133,7 +133,7 @@ jobs:
         VAULT_PORT: 8200
 
     - name: Test Vault Action (default KV V2)
-      uses: ./
+      uses: hashicorp/vault-action@main
       id: kv-secrets
       with:
         url: http://localhost:8200
@@ -144,7 +144,7 @@ jobs:
           secret/data/nested/test otherSecret ;
 
     - name: Test Vault Action (default KV V1)
-      uses: ./
+      uses: hashicorp/vault-action@main
       with:
         url: http://localhost:8200
         token: testtoken
@@ -154,7 +154,7 @@ jobs:
           my-secret/nested/test otherAltSecret ;
 
     - name: Test Vault Action (cubbyhole)
-      uses: ./
+      uses: hashicorp/vault-action@main
       with:
         url: http://localhost:8200
         token: testtoken
@@ -165,7 +165,7 @@ jobs:
     # The ordering of these two Test Vault Action Overwrites Env Vars In Subsequent Action steps matters
     # They should come before the Verify Vault Action Outputs step
     - name: Test Vault Action Overwrites Env Vars In Subsequent Action (part 1/2)
-      uses: ./
+      uses: hashicorp/vault-action@main
       with:
         url: http://localhost:8200/
         token: testtoken
@@ -173,7 +173,7 @@ jobs:
           secret/data/test secret | SUBSEQUENT_TEST_SECRET;
 
     - name: Test Vault Action Overwrites Env Vars In Subsequent Action (part 2/2)
-      uses: ./
+      uses: hashicorp/vault-action@main
       with:
         url: http://localhost:8200/
         token: testtoken
@@ -181,7 +181,7 @@ jobs:
           secret/data/subsequent-test secret | SUBSEQUENT_TEST_SECRET;
 
     - name: Test JSON Secrets
-      uses: ./
+      uses: hashicorp/vault-action@main
       with:
         url: http://localhost:8200
         token: testtoken
@@ -207,7 +207,7 @@ jobs:
 
     - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
       with:
-        node-version: '20.9.0'
+        node-version: '20.12.2'
 
     - name: Setup NPM Cache
       uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
@@ -233,7 +233,7 @@ jobs:
         VAULT_CLIENT_KEY: ${{ secrets.VAULT_CLIENT_KEY }}
 
     - name: Test Vault Action (default KV V2)
-      uses: ./
+      uses: hashicorp/vault-action@main
       id: kv-secrets-tls
       with:
         url: https://localhost:8200
@@ -247,7 +247,7 @@ jobs:
           secret/data/nested/test otherSecret ;
 
     - name: Test Vault Action (tlsSkipVerify)
-      uses: ./
+      uses: hashicorp/vault-action@main
       with:
         url: https://localhost:8200
         token: ${{ env.VAULT_TOKEN }}
@@ -258,7 +258,7 @@ jobs:
           secret/data/tlsSkipVerify skip ;
 
     - name: Test Vault Action (default KV V1)
-      uses: ./
+      uses: hashicorp/vault-action@main
       with:
         url: https://localhost:8200
         token: ${{ env.VAULT_TOKEN }}
@@ -271,7 +271,7 @@ jobs:
           my-secret/nested/test otherAltSecret ;
 
     - name: Test Vault Action (cubbyhole)
-      uses: ./
+      uses: hashicorp/vault-action@main
       with:
         url: https://localhost:8200
         token: ${{ env.VAULT_TOKEN }}

CHANGELOG.md

@@ -1,5 +1,11 @@
 ## Unreleased
 
+Improvements:
+
+* chore(deps): bump jsonata from 2.0.3 to 2.0.4 [GH-531](https://github.com/hashicorp/vault-action/pull/531)
+* chore(deps): bump got from 11.8.6 to 14.2.1 [GH-533](https://github.com/hashicorp/vault-action/pull/533)
+* convert project from common js to an esm module [GH-533](https://github.com/hashicorp/vault-action/pull/533)
+
 Features:
 
 * `secretId` is no longer required for approle to support advanced use cases like machine login when `bind_secret_id` is false. [GH-522](https://github.com/hashicorp/vault-action/pull/522)

dist/index.js

@@ -14249,16 +14249,18 @@ async function getClientToken(client, method, path, payload) {
 
 
 
-;// CONCATENATED MODULE: external "module"
-const external_module_namespaceObject = __WEBPACK_EXTERNAL_createRequire(import.meta.url)("module");
+;// CONCATENATED MODULE: external "node:module"
+const external_node_module_namespaceObject = __WEBPACK_EXTERNAL_createRequire(import.meta.url)("node:module");
 ;// CONCATENATED MODULE: ./src/cjs-require.js
 // This allows us to use `require` in our ECMAScript module
 // See: https://github.com/vercel/ncc/issues/791
-// https://nodejs.org/api/module.html#modulecreaterequirefilename
 
-const cjs_require_require = (0,external_module_namespaceObject.createRequire)(import.meta.url);
 
-/* harmony default export */ const cjs_require = (cjs_require_require);
+
+const cjs_require_filename = external_node_url_namespaceObject.fileURLToPath(import.meta.url);
+globalThis.require = (0,external_node_module_namespaceObject.createRequire)(cjs_require_filename);
+
+/* harmony default export */ const cjs_require = (require);
 
 ;// CONCATENATED MODULE: ./src/secrets.js
 

package-lock.json

@@ -12,7 +12,7 @@
             "dependencies": {
                 "@actions/core": "^1.10.1",
                 "got": "^14.2.1",
-                "jsonata": "^2.0.3",
+                "jsonata": "^2.0.4",
                 "jsrsasign": "^11.0.0"
             },
             "devDependencies": {
@@ -4169,9 +4169,9 @@
             }
         },
         "node_modules/jsonata": {
-            "version": "2.0.3",
-            "resolved": "https://registry.npmjs.org/jsonata/-/jsonata-2.0.3.tgz",
-            "integrity": "sha512-Up2H81MUtjqI/dWwWX7p4+bUMfMrQJVMN/jW6clFMTiYP528fBOBNtRu944QhKTs3+IsVWbgMeUTny5fw2VMUA==",
+            "version": "2.0.4",
+            "resolved": "https://registry.npmjs.org/jsonata/-/jsonata-2.0.4.tgz",
+            "integrity": "sha512-vfavX4/G/yrYxE+UrmT/oUJ3ph7KqUrb0R7b0LVRcntQwxw+Z5kA1pNUIQzX5hF04Oe1eKxyoIPsmXtc2LgJTQ==",
             "engines": {
                 "node": ">= 8"
             }
@@ -9070,9 +9070,9 @@
             "peer": true
         },
         "jsonata": {
-            "version": "2.0.3",
-            "resolved": "https://registry.npmjs.org/jsonata/-/jsonata-2.0.3.tgz",
-            "integrity": "sha512-Up2H81MUtjqI/dWwWX7p4+bUMfMrQJVMN/jW6clFMTiYP528fBOBNtRu944QhKTs3+IsVWbgMeUTny5fw2VMUA=="
+            "version": "2.0.4",
+            "resolved": "https://registry.npmjs.org/jsonata/-/jsonata-2.0.4.tgz",
+            "integrity": "sha512-vfavX4/G/yrYxE+UrmT/oUJ3ph7KqUrb0R7b0LVRcntQwxw+Z5kA1pNUIQzX5hF04Oe1eKxyoIPsmXtc2LgJTQ=="
         },
         "jsonc-parser": {
             "version": "3.2.1",

package.json

@@ -37,7 +37,7 @@
     "dependencies": {
         "@actions/core": "^1.10.1",
         "got": "^14.2.1",
-        "jsonata": "^2.0.3",
+        "jsonata": "^2.0.4",
         "jsrsasign": "^11.0.0"
     },
     "devDependencies": {

src/cjs-require.js

@@ -1,7 +1,9 @@
 // This allows us to use `require` in our ECMAScript module
 // See: https://github.com/vercel/ncc/issues/791
-// https://nodejs.org/api/module.html#modulecreaterequirefilename
-import { createRequire } from "module";
-const require = createRequire(import.meta.url);
+import { createRequire } from 'node:module';
+import url from 'node:url';
+
+const __filename = url.fileURLToPath(import.meta.url);
+globalThis.require = createRequire(__filename);
 
 export default require;